[Release] Checkmk stable release 2.5.0p6

Dear friends of Checkmk,

the new stable release 2.5.0p6 of Checkmk is ready for download.

This stable release ships with 52 changes affecting all editions of Checkmk,
12 changes for all commercial editions, 1 Ultimate specific,
1 Ultimate with multi-tenancy specific and 0 Cloud specific changes.

Support periods can be found here: Checkmk versions

Changes in all Checkmk editions:

BI

  • 19950 BI: add new downtime handling computation option…
  • 19601 FIX: Fix error after failed bulk change on BI rules plus reload…

Checks & agents

  • 19574 Windows agent: drop 32-bit support…
    NOTE: Please refer to the migration notes!
  • 19287 NetApp ONTAP: Add NTP time offset monitoring per node…
    NOTE: Please refer to the migration notes!
  • 19463 Podman: containers exited with code 0 are removed from individual monitoring…
    NOTE: Please refer to the migration notes!
  • 20010 Certificate check: STARTTLS is now possible for IMAP…
  • 20011 Certificate check: STARTTLS is now possible for LDAP…
  • 19865 Kubernetes Pod resources: Allow setting alert thresholds on pending and failed pods…
  • 19286 FIX: Fix AWS EC2 limits to use actual Service Quotas API values…
    NOTE: Please refer to the migration notes!
  • 19863 FIX: NTNX Data Protection: fix swapped metrics, units, and labels…
    NOTE: Please refer to the migration notes!
  • 19831 FIX: Fix ESX GPU utilization showing values 100 times too high…
  • 19461 FIX: Fix Proxmox VE node allocation crash on missing CPU or memory capacity data…
  • 18559 FIX: Fix crash in APC NetShelter PDU monitoring caused by null-padded SNMP names…
  • 19951 FIX: Fix crash in NetApp ONTAP special agent when SnapVaults are enabled on MetroCluster systems…
  • 19348 FIX: Fix metric translation for check_ping…
  • 19349 FIX: Fix metric translations for check_icmp…
  • 19346 FIX: Fix metric translations for check_ping.exe and check_tcp.exe…
  • 18557 FIX: HPE StoreOnce via REST API 4.x: fix crash while collecting monitoring data…
  • 18558 FIX: HPE StoreOnce: Fix inverted TLS certificate verification…
  • 19570 FIX: Room Alert 3S: fix internal temperature sensor when Celsius unavailable via SNMP walk…
  • 18749 FIX: UPS Capacity: warn/crit thresholds are now evaluated while the UPS is on mains…
  • 19867 FIX: Windows time service: Avoid crash on partial sync-attempt state ruleset…
  • 18747 FIX: agent_elasticsearch: Handle HTTP errors and produce deterministic section output…
  • 20087 FIX: check-httpv2: reduce runtime overhead per check invocation…
  • 20031 FIX: dell_eql_storage: Stop crashing on (partially) empty rows…
  • 20027 FIX: dell_idrac_disks, dell_idrac_virtdisks: do not crash on disks with empty name…
  • 19809 FIX: dell_idrac_fans: Fix crash when device reports only partial thresholds…
  • 20029 FIX: dell_idrac_power: Support redefined value scope of powerUnitRedundancyStatus…
  • 19948 FIX: mk-job on AIX: avoid crash from locale-translated time labels…
  • 19210 FIX: mk-oracle: Fix version reporting for non-Linux builds…
  • 18492 FIX: win_netstat: add missing enumeration elements…

Core & setup

  • 19071 FIX: Fixed bug in --nagios-config…

Event console

  • 19963 FIX: Fix Event Console case-insensitive regex filter operator (~~)…

Notifications

  • 20049 FIX: Notification parameters: Preserve the order of parameters when reordering them…
  • 20048 FIX: Notification parameters: Widen the “Call with the following parameters” input fields…
  • 20047 FIX: Parameters for notification methods: Keep search filter when editing a parameter…

Other components

  • 20008 FIX: NagVis: Updated to 1.10.4…

REST API

  • 20082 FIX: Fix REST API rejecting automation users when two-factor authentication is required…

Reporting & availability

  • 19622 FIX: Subreports now inheriting heading levels…

Setup

  • 19997 FIX: Fix: Saving rule with predefined condition no longer drops the link…
  • 19607 FIX: Product usage analytics: Stray files can no longer shadow the CLI tool…
  • 19608 FIX: Product usage analytics: respect disabled state in scheduled run…
  • 19602 FIX: Wrong rule condition preview for service name regex ending in $$…

Site management

  • 19573 FIX: Fix system executables failing due to Checkmk’s OpenSSL being loaded via LD_LIBRARY_PATH…
  • 19708 FIX: omd update: Don’t offer to delete ‘var/check_mk/persisted’ during the update…

User interface

  • 19902 Dashboard filter panel: adjust host and service filter categories…
  • 19999 FIX: Action menu: first attempt no longer reports ‘No rows selected’ on views with always-on checkboxes…
  • 19352 FIX: Custom graph editor: Allow empty symbol for custom units…
  • 19353 FIX: Custom graph editor: Fix z-fighting between dropdowns and section headers…
  • 19995 FIX: Host/Service check command (exact match) filter: empty result list…
  • 19996 FIX: Host/Service check command (regex) filter: use substring match like other regex filters…
  • 20001 FIX: Perf-O-Meter column is empty when exporting views as CSV or JSON…

Changes in Checkmk commercial editions:

Agent Bakery

  • 20068 FIX: Fix agent updater losing registration on Solaris after agent update…

Checks & agents

  • 19460 FIX: Synthetic Monitoring: Root agent deployment on Linux is no longer supported in combination with RCC as environment creation mode…
    NOTE: Please refer to the migration notes!

Dynamic host configuration

  • 19927 FIX: DCD connection names are now validated as identifiers on creation…

Livestatus

  • 18748 FIX: liveproxyd: Do not abort client response on transient send-buffer pressure…

Livestatus proxy

  • 18751 FIX: Livestatus proxy no longer connects to disabled site connections…

Reporting & availability

  • 20000 Edit report page: rename three field labels for clarity…
  • 20017 FIX: Suppress site connection errors for sites not queried by a report…
  • 19623 FIX: Fix subreport elements ignoring scheduler host tag filters…
  • 20018 FIX: Section numbers in PDF reports no longer skip after un-numbered headings…

Setup, site management

  • 18602 FIX: Fix race when enabling multiple extension packages at once…
  • 20083 FIX: SAML: advertise the encryption certificate in the metadata…

The Checkmk Micro Core

  • 20088 FIX: SmartPing: fix failure when IPv6 is disabled at kernel level…

Changes in Checkmk Ultimate:

Checks & agents

  • 20067 FIX: Windows agent: register agent updater during auto-registration…

Changes in Checkmk Cloud:

NO CHANGES

Changes in Checkmk Ultimate with multi-tenancy:

Reporting & availability

  • 19624 FIX: Fix Customer filter being ignored in subreport elements…

You can download Checkmk from our download page: https://checkmk.com/download

List of all changes: https://checkmk.com/werks?product=cmk&version=2.5.0p6

We greatly thank you for using Checkmk and wish you a suultimatessful monitoring,

Your Checkmk Team

1 Like

After upgrading to this, I got an “Internal Server Error 500”.

I reverted to 2.5.0p5: Works again.

I can give more information tomorrow, if needed.

@openmindz a 500 error can be anything, so a support ticket would probably the most efficient way to get support, as one would need to go through the logs to figure out what happened. Maybe retrying the update and paying close attention to any output might be helpful.

Hi Robin,

OK, it can mean anything, but what the result is: Your site no longer “works”…
Ticket is already open, albeit for a different matter, and I haven’t mentioned
this, yet. Will do so, soon though.

For the sake of completeness: There were no errors at all when the update
was conducted.

Thanks anyway for your hint

1 Like

Let me guess, RHEL 9.7 or 9.8?

1 Like

Almost: It’s Oracle Linux 9.7

Thanks for reporting. We have an internal ticket for this.

We will keep you posted.

2 Likes

We are also getting a 500 error. This applies to both RHEL 9.8 and RHEL 10.2. We are using mod_auth_openidc for Single Sign-On via OpenID Connect (OIDC) authentication. Could this be a side effect of Werk #19573?

Apache error_log:

…
[Fri Jun 12 13:48:06.514224 2026] [wsgi:error] [pid 3231254:tid 3231254] [client 127.0.0.1:45802] ImportError: /omd/sites/<replaced>/lib/python3.13/site-packages/cryptography/hazmat/bindings/_rust.abi3.so: undefined symbol: EVP_sm4_ecb, version OPENSSL_3.0.0

This was also reported here.